Re:Marriott hack hits 500M Starwood guests
by closeparen on Friday November 30, 2018 @12:38PM
(#18570756)
No car on the market is as safe as the absence of a car. Car companies make tradeoffs towards safety where it's reasonable and economical, but still fulfill their baseline mission, which is inherently dangerous. People are injured and killed in car crashes every day; car companies are not "held accountable" unless there's a specific defect and they should have known better.
[ Parent
| on HN ]
Re:Marriott hack hits 500M Starwood guests
by redbeard0x0a on Friday November 30, 2018 @01:49PM
(#18571473)
Such as a company knowing better than to keep their servers patched, to have a process to make sure their servers are patched, to have a process that shows a list of servers that are _not_ patched, etc.
There are a lot of really stupid mistakes made in a lot of these data disclosures that a competent IT team (and dev team) can prevent from happening. The current state of things is that there are hardly any consequences for losing people's data, just make a bulk purchase of credit monitoring and call it a day. This is cheaper than actually hiring the right people and implementing the correct processes.